Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: XcP42SMwA1tRYs4Q9ZB3/LR0V5vpcogNMPdEKkuf2X8=
Subject key identifier: 7D:50:AF:DA:AE:EF:03:36:FD:A6:6E:BE:A9:EA:ED:28:51:9B:AF:63
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 01A0E399311A34424DE8FD60AA0D652EC391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0A21
Signing time: Sun 27 Sep 2026 16:01:02 +0000
Manifest this update: Sun 27 Sep 2026 16:01:02 +0000
Manifest next update: Mon 28 Sep 2026 16:01:02 +0000
Files and hashes: 1: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: 1b6IJYRmXXFs6QZgtl7PwYNR5bzIrrwKiuWvPXh7u84=)
2: W47tZvu_CAnfpr4QCettmz3h4VA.roa (hash: m6c/GDR1Z9ctHQPSYVmUi8E4ot+sOPV9fr/Kpm+Mrgw=)
3: vTRqCtvnjV5ULYp3QVGnOSeLI48.roa (hash: XZSHqXZ9/2xuTC2yVf4djicrqgDxlpDHvGc8OnjW13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:31:1a:34:42:4d:e8:fd:60:aa:0d:65:2e:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Sep 27 16:01:02 2026 GMT
Not After : Sep 28 16:01:02 2026 GMT
Subject: CN=7d50afdaaeef0336fda66ebea9eaed28519baf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:43:76:e7:15:e7:bf:16:7f:a5:d5:c4:f6:
61:d3:d1:fe:3a:93:ff:94:de:f9:44:c8:be:d8:9e:
21:0a:33:46:bd:43:fe:41:2b:33:d1:44:d9:9d:a6:
4f:f2:1e:dc:cc:fa:4f:3c:fc:35:38:f2:9d:af:ed:
b9:12:3a:7e:b4:d5:5d:1a:fa:be:84:59:8d:d5:0f:
0d:91:1e:f3:08:d9:00:6d:1b:10:a3:94:97:05:92:
49:aa:cd:77:a1:12:1a:59:43:e3:42:c0:e3:42:2b:
89:db:77:a1:30:17:c9:31:b8:ca:6f:6b:cd:9d:a8:
f9:5f:6a:67:e0:97:79:76:a8:02:37:c6:f2:c5:6a:
b1:a1:a1:1e:ba:98:52:aa:5d:e6:f6:19:4b:c3:56:
21:74:ac:ee:53:f8:53:d3:88:4e:7d:ad:99:b9:1c:
a0:e8:d3:d6:88:33:f8:8d:ea:94:38:60:e9:11:82:
ca:d0:16:fe:d9:02:c4:30:32:aa:60:23:25:19:3e:
54:0a:b8:c2:e9:f6:20:8e:67:c0:18:32:5a:53:8b:
b9:cf:8f:b6:43:8f:9e:7c:f0:6d:0e:a6:5b:c9:0b:
f6:fe:ff:fa:0c:41:45:02:38:d1:83:3e:a9:df:3b:
54:6b:c0:3e:d3:ce:8b:38:53:60:39:f5:56:34:b8:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:AF:DA:AE:EF:03:36:FD:A6:6E:BE:A9:EA:ED:28:51:9B:AF:63
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:21:eb:f1:24:03:83:1e:e5:87:7f:fb:ae:93:35:fb:42:
2d:1a:ce:63:e9:73:dc:be:28:bc:ca:60:f4:30:cd:c0:e8:06:
6b:77:aa:a8:00:d2:29:1a:60:a0:2a:6d:10:83:57:cb:95:85:
56:e9:8b:8e:73:98:4b:6e:ac:60:fa:e9:2b:02:60:54:46:0e:
b9:0d:87:c9:9f:e7:67:04:92:61:ad:9c:5c:f8:05:f4:cc:97:
e8:86:87:b0:8d:c3:ca:f6:f8:df:a6:f0:1c:0b:eb:0a:20:26:
2d:04:8c:9b:11:da:b8:1a:18:cb:35:f8:4a:03:a7:e9:4b:64:
30:1b:4f:57:1c:88:ea:6e:98:c8:95:76:35:05:5c:d6:5c:a0:
69:74:05:41:82:0f:2a:b2:fd:b9:af:6b:09:68:45:52:f9:a8:
f6:83:c0:a0:a0:e0:07:e3:41:ad:bb:92:8d:80:a2:f6:f1:b2:
96:13:3c:9c:cc:1e:c1:50:a9:86:6a:9e:5d:56:9b:a4:cc:b5:
f9:a0:8a:10:de:56:a3:2b:2a:be:d4:bd:b9:84:aa:e0:3a:6c:
0c:89:6d:f8:51:f4:32:18:9b:eb:d1:ef:d3:c6:0a:ac:b0:41:
b0:5e:8d:3f:d4:77:68:59:83:6e:8a:8a:46:ae:9d:fc:5f:33:
06:74:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:06 2026 by rpki-client